Syslog not forward from XG135 to Graylog

Question

Hi All, 
 We have configure graylog (Open source) for syslog collect from XG135. 
 We have configured log settings from XG135 but we have not any log forwarding found in sophos log viewer. 
 So can you please share any configuration steps for syslog collect from XG135 to graylog. 
 
 Thanks and Regards. 
 Hitesh Lekhadiya

Vishal_R · Accepted Answer

Hi Laxmi Diamond : You may validate the Syslog configuration as per the below help section: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/LogSettings/SyslogServerAdd/index.html If Configuration seems to be fine then you may take SSH of XG and navigate to Console option and use tcpdump to capture the packets on Syslog server IP. community.sophos.com/.../sophos-xg-firewall-how-to-tcpdump Based on packet request if the request is going out via the correct interface to Syslog server then it indicates XG is already forwarding logs data to Syslog server.

djdrastic · Answer

When dealing with Graylog ensure that timezones and time is set correctly on both the graylog vm as well as the xg device.

Syslog not forward from XG135 to Graylog

Top Replies

Submitted a Tech Support Case lately from the Support Portal?